CVE-2022-50620— Linux kernel 安全漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2022-50620の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
f2fs: fix to invalidate dcc->f2fs_issue_discard in error path
ソース: NVD (National Vulnerability Database)
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to invalidate dcc->f2fs_issue_discard in error path Syzbot reports a NULL pointer dereference issue as below: __refcount_add include/linux/refcount.h:193 [inline] __refcount_inc include/linux/refcount.h:250 [inline] refcount_inc include/linux/refcount.h:267 [inline] get_task_struct include/linux/sched/task.h:110 [inline] kthread_stop+0x34/0x1c0 kernel/kthread.c:703 f2fs_stop_discard_thread+0x3c/0x5c fs/f2fs/segment.c:1638 kill_f2fs_super+0x5c/0x194 fs/f2fs/super.c:4522 deactivate_locked_super+0x70/0xe8 fs/super.c:332 deactivate_super+0xd0/0xd4 fs/super.c:363 cleanup_mnt+0x1f8/0x234 fs/namespace.c:1186 __cleanup_mnt+0x20/0x30 fs/namespace.c:1193 task_work_run+0xc4/0x14c kernel/task_work.c:177 exit_task_work include/linux/task_work.h:38 [inline] do_exit+0x26c/0xbe0 kernel/exit.c:795 do_group_exit+0x60/0xe8 kernel/exit.c:925 __do_sys_exit_group kernel/exit.c:936 [inline] __se_sys_exit_group kernel/exit.c:934 [inline] __wake_up_parent+0x0/0x40 kernel/exit.c:934 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x164 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:636 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:654 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581 The root cause of this issue is in error path of f2fs_start_discard_thread(), it missed to invalidate dcc->f2fs_issue_discard, later kthread_stop() may access invalid pointer.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于f2fs在错误路径中未正确使能dcc->f2fs_issue_discard，可能导致空指针解引用。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2022-50620の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2022-50620のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · Linux · 2025-12-08 · 82 CVEs total
| CVE-2022-50630 | mm: hugetlb: fix UAF in hugetlb_handle_userfault | |
| CVE-2023-53752 | net: deal with integer overflows in kmalloc_reserve() | |
| CVE-2022-50627 | wifi: ath11k: fix monitor mode bringup crash | |
| CVE-2022-50628 | drm/gud: Fix UBSAN warning | |
| CVE-2022-50626 | media: dvb-usb: fix memory leak in dvb_usb_adapter_init() | |
| CVE-2022-50623 | fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() | |
| CVE-2022-50622 | ext4: fix potential memory leak in ext4_fc_record_modified_inode() | |
| CVE-2022-50621 | dm: verity-loadpin: Only trust verity targets with enforcement | |
| CVE-2022-50619 | drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() | |
| CVE-2022-50624 | net: netsec: fix error handling in netsec_register_mdio() | |
| CVE-2022-50629 | wifi: rsi: Fix memory leak in rsi_coex_attach() | |
| CVE-2023-53742 | kcsan: Avoid READ_ONCE() in read_instrumented_memory() | |
| CVE-2023-53743 | PCI: Free released resource after coalescing | |
| CVE-2023-53744 | soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe | |
| CVE-2023-53745 | um: vector: Fix memory leak in vector_config | |
| CVE-2023-53746 | s390/vfio-ap: fix memory leak in vfio_ap device driver | |
| CVE-2023-53747 | vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF | |
| CVE-2023-53748 | media: mediatek: vcodec: Fix potential array out-of-bounds in decoder queue_setup | |
| CVE-2023-53750 | pinctrl: freescale: Fix a memory out of bounds when num_configs is 1 | |
| CVE-2023-53751 | cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname |
Showing 20 of 82 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
同じベンダー: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
V. CVE-2022-50620へのコメント
まだコメントはありません